Fixed: CORS header is not sent